Get Oracle 1Z0-116 Dumps Questions [2023] To Gain Brilliant Result
1Z0-116 dumps - TrainingDump - 100% Passing Guarantee
Understanding functional and technical aspects of Oracle Database Security Administration Exam Number: 1Z0-116
The following will be discussed in the ORACLE 1Z0-116 exam dumps:
- Survey the normal assault focuses for a data set
- Survey security needs (hazard decrease, administrative consistence)
- Send the Maximum Security Architecture
NEW QUESTION 54
If a column is not specified in a Data Redaction Policy, to which column(s) is it applied?
- A. foreign key columns only
- B. columns with any type of constraint
- C. none of the columns
- D. the primary and foreign key columns
- E. the primary key column only
Answer: D
NEW QUESTION 55
You Issue this statement as user SYS:
audit, context namespace kilimanjaro attributes a, b;
Which is true?
- A. The statement must be updated to specify which users to audit.
- B. The statement will not audit any users.
- C. The statement will only audit sys.
- D. The statement will audit all users.
Answer: C
NEW QUESTION 56
An audit administrator wants to log Client Context variables In the audit trail.
Examine this query and the output:
- A. AUDIT CONTEXT NAMESPACE hr_Ct:x ATTRIBUTES hr_app_id NAMESPACE USERENV ATTRIBUTES ALL BY hr;
- B. AUDIT CONTEXT NAMESPACE hr_ctx ATTRIBUTES hr_app_id NAMESPACE USERENV ATTRIBUTES current:_user( db_name BY hr;
- C. AUDIT POLICY hr_emp_pol EXCEPT hr;
- D. CREATE AUDIT POLICY hr_omp_pol ACTIONS UPDATE ON hr.employoes;
- E. AUDIT POLICY hr_emp_pol BY hr;
- F. CREATE AUDIT POLICY hr_emp_pol ACTIONS SELECT ON hr. employees;
- G. AUDIT CONTEXT NAMESPACE hr_ctx ATTRIBUTES hr_app_id, current_user, db_name BY hr
Answer: A
NEW QUESTION 57
Examine this code which executes successfully:
If the IN_OFFICE_ON_WEEKEND rule set returns true for an attempt to connect from Inside the office on weekends, which two are true about the effects of this configuration?
- A. This has no effect on JIM'S connection attempts.
- B. JIM con never connect.
- C. JIM can only connect when In the office on weekends.
- D. TOM can never connect.
- E. This has no effect on tom's connect attempts.
Answer: B,C
NEW QUESTION 58
To avoid hard coding passwords in scripts, you have elected to create an external password store-Examine this list of steps:
1. Set the external password store wallet location.
ALTER SYSTEM SET EXTERNAL_KEYSTORE_CREDENTIAL_LOCATION = "/*tc/ORACLE/WALLETS/orcl/external_Btore" SCOPE c SPFILE;
2. Log in as a user who has syskm privileges.
3. Create an auto-logln keystore that contains the keystore password including the add secret clause.
ADMINISTER KEY MANAGEMENT ADD SECRET 'password'
FOR CLIENT 'TDE_WALLET'
TO LOCAL AUTO_LOGIH KEYSTORE '/etc/0RACLE/WALLETS/orcl/extemal_store';
4. Restart the database instance as sysdba.
SHUTDOWN IMMEDIATE STARTUP
5. Create an auto-logln keystore that contains the keystore password.
ADMINISTER KEY MANAGEMENT
FOR CLIENT 'TDE_WALLET'
TO LOCAL AUTO_L0GIN KEYSTORE ' /etc/ORACLE/WALLETS/orcl/external_store' ;
6. Set an Encryption Key.
ADMINISTER KEY MANAGEMENT SET ENCRYPTION KEY IDENTIFIED BY keystore_password WITH BACKUP Identify the minimum number of steps in the correct order that must be performed to create the external password store.
- A. 2,3,6,4
- B. 2,1,3,4
- C. 1,2,5,4
- D. 1,2,3,4
- E. 1,2,6,3,5
- F. 1,2,3,6,4
Answer: E
NEW QUESTION 59
Database Vault is configured and enabled in the database. You create a rule set to enforce security on the hr. employees table.
Examine these requirements:
1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES.
2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES.
3. Audit records are to be collected for every evaluation of the rule set.
Which two options are true when creating the rule set?
- A. The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all.
- B. One rule set contains two rules OR'ed together.
- C. The rule set parameter audit_options must be set to dbms_macutl.g_buleset_audit_fail + DBMS MACUTL.G RULESET AUDIT SUCCESS.
- D. The rule set must be defined as is_static.
- E. The rule set parameter audit_options must be set to dbms_macutl.g_ruleset_audtt_fail.
Answer: A,D
NEW QUESTION 60
Examine this configuration and requirement:
1. The hr user created a private database link in the pdb2 pluggable database linking to the hr schema In the PDBl pluggable database.
2. Other users in pdb2 must query the remote HR.EMPLOYEES table In PDBI using this database link.
Which two operations together ensure that the database link provides access only to the HR.EMPLOYEES table in the PDBI pluggable database?
- A. Grant other users access to the database link in the PDBI pluggable database.
- B. Only grant other users access to the HR.EMPLOYEES table In the pdb2 pluggable database.
- C. Grant other users access to the database link In the PDB2 pluggable database.
- D. Grant access to the view of the remote HR.EMPLOYEES table In the PDB2 pluggable database.
- E. Create a view In the HR schema for the remote hr. employees table of the pdb2 pluggable database .
Answer: C,E
NEW QUESTION 61
Which two are true about auditing in an Oracle Database?
- A. No SYS operations are audited if audit_sys_operations is set on false in unified auditing.
- B. SYS logon operations are always audited In unified auditing.
- C. SYS logon operations are always audited in mixed mode auditing.
- D. No SYS operations are audited if audit_sys_operations is set on false in mixed mode auditing.
- E. No SYS operations are audited by default In unified auditing.
- F. All SYS operations are audited by default in unified auditing.
Answer: D,E
NEW QUESTION 62
You are connected to an Oracle database Instance as a user with privileges to query the hr.employees table.
You are not exempt from any reduction policies.
Examine this query and result:
You implement this Data Redaction policy:
You re-execute the select statement.
What is the result?
A)
B)
C)
D)
E)
- A. Option B
- B. Option A
- C. Option E
- D. Option D
- E. Option C
Answer: E
NEW QUESTION 63
Which two privileges can be restricted at the column level?
- A. DELETE
- B. GRANT
- C. UPDATE
- D. SELECT
- E. INSERT
- F. REVOKE
Answer: C,E
NEW QUESTION 64
Examine this security parameter and Its value:
SEC_USER_ONAUTHORIZED_ACCESS_BANNER=/opt/oracla/admin/data/unauthwarninq.txt In which file must you include this parameter?
- A. tnsnaroes.ora
- B. server.xml
- C. listener.ora
- D. aqlnet.ora
- E. init. era
- F. names.ora
Answer: C
NEW QUESTION 65
You must restrict execution of the alter system checkpoint command to certain conditions, specified in a rule set used by a command rule.
Which two parameters must be specified In the dbms_macadm.create_command_rule procedure to do this?
- A. OBJECT_OWNER=>'SYS
- B. OBJECT_NAME=>'CHECKPOINT'
- C. CLAUSE_NAME=>'SYSTEM'
- D. COMMAND=>'ALTER'
- E. COMMANI>=>' ALTER SYSTEM'
- F. CLAUSE_NAME=>'CHECKPOINT'
- G. PARAMETER_NAM£=>'CHECKPOINT'
Answer: C,F
NEW QUESTION 66
You export and Import a table's data using Data Pump connected as a user who Is assigned DBA role with default privileges.
There is a data redaction policy on the table.
Which two statements are true about the redaction policy?
- A. The policy Is Included In the export and Import operation but is not applied by default to the objects In the target system.
- B. The actual data in the tables is copied to the Data Pump target system with the redaction policy applied.
- C. The policy Is not Included In export and Import operation.
- D. The actual data in the tables is copied to the Data Pump target system without being redacted.
- E. The policy is included in the export and import operation and applied by default to the objects in the target system.
Answer: C,D
NEW QUESTION 67
You grant user JANE the SYSDBA administrative privilege. Which two are true?
- A. User JANE must always connect as SYSDBA to the database instance.
- B. User JANE can backup and recover the database.
- C. User JANE must use operating system authentication.
- D. User JANE can create objects In sys schema only when connected as SYSDBA.
- E. User JANE can grant SYSDBA privilege to roles.
- F. User JANE acquires the DBA role by default.
Answer: D
NEW QUESTION 68
You connect to the database Instance over a network to change the password of user scott.
Which two methods avoid the new password for user scott from being compromised by network sniffing?
- A. Set the server side sqlnet.ora parameter SQLNET.CRYPTO_CHECKSUM_SERVER-REQUESTED.
- B. Use ALTER USER SCOTT IDENTIFIED BY VALUES '<value>*.
- C. Use ALTER USER SCOTT IDENTIFIED BY <password>.
- D. Set the server side sqlnet.ora parameter SQLNET.ENCRYPTION_SERVER=REQUESTED.
- E. Use ALTER USER SCOTT PASSWORD EXPIRE.
- F. Use the SQL"PIus command password SCOTT.
Answer: A,B
NEW QUESTION 69
Which two tasks should you perform initially to Implement native network encryption without disrupting client applications?
- A. Verify which clients have encrypted connections using the view vSsession_CONNECT_INFO.
- B. Set the server side sqinet.oia parameter sqlnet.encryption_server = requested.
- C. Modify all JDBC Thin based clients to include network encryption parameters in Java.
- D. Upgrade all OCI-basod clients to match the database version.
- E. Set the client side sqinec.ora parameter SQLNET.ENCRYPTION _client = required.
- F. Set the server side sqinot.ora parameter SQLNET.CRYPTO_CHECKSOM_SERVER - accepted.
- G. Configure the listener with an endpoint for protocol TCPS.
Answer: G
NEW QUESTION 70
A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table.
Which two arguments are passed to the function?
- A. the schema owning the table
- B. the policy group to which the policy belongs
- C. the policy name
- D. the policy type
- E. the table name
Answer: A,C
NEW QUESTION 71
Which CVSS Version 3.1 metric indicates how close an attacker needs to be to the vulnerable component?
- A. Availability
- B. User Interaction
- C. Attack Vector
- D. Privileges Required
- E. Scope
- F. Attack Complexity
Answer: E
NEW QUESTION 72
Which four products, features, or methods can help facilitate compliance with various privacy-related regulatory requirements such as PCI-DSS and the EU GDPR?
- A. Data Masking & Subsetting
- B. Transparent Data Encryption
- C. Oracle Sharding
- D. Table Partitioning
- E. Real Application Clusters
- F. Data Redaction
- G. GoldenGate
- H. Data Guard
- I. Database Vault
- J. Real Application Testing
Answer: A,F,H,J
NEW QUESTION 73
Which three are part of an access control list (ACL) when using Real Application Security?
- A. privileges
- B. column constraints
- C. roles
- D. data realms
- E. schemas
- F. data realm constraints
- G. policies
Answer: A,B,F
NEW QUESTION 74
The listener configuration contains these lines related to Valid Node Checking for Registration (VNCR);
Which two statements are true?
- A. Listener listener will only deny instance registration from
REGISTRATION EXCLUDED NODES LISTENER. - B. Both parameters cannot be set at the same time so will be Ignored.
- C. Listener listener will allow instance registration from IP address 192.168.20.2.
- D. Listener listener will allow Instance registration from
REGISTRATION_INVITED_NODES_LISTENEP. - E. Listener listener will deny instance registration from IP address 192.168.20.2.
Answer: D
NEW QUESTION 75
Which two statements are true about Database Vault factors?
- A. Changing a factor type can change how factors are evaluated.
- B. You can use a factor to enforce conditions for a command rule.
- C. A factor can reference a function In another schema to compute its value, provided execute privilege Is granted to the sys user.
- D. You get an error at the time of factor creation If the retrieval method function you have specified does not exist.
- E. You can configure a factor to be evaluated only once per session.
Answer: C,E
NEW QUESTION 76
Which two statements are true about running the Oracle Database Security Assessment Tool (DBSAT) Collector?
- A. It runs only on Windows systems.
- B. It runs only on UNIX/Linux systems.
- C. It must be run by an OS user with read permissions on files and directories under ORACLE_HOME.
- D. It must be run on the server that contains the database.
- E. It must connect to the database using a SYSDBA connection.
Answer: A,C
NEW QUESTION 77
Examine these commands and the output used to configure Real Application Security:
What does this output mean?
- A. You created a realm that references a non-existent policy.
- B. You created a realm and an access control list that reference a non-existent policy.
- C. You created an access control list that references a non-existent realm.
- D. You created a policy that references a non-existent realm.
- E. You treated an access control list that references a non-existent policy.
- F. You created a policy that references a non-existent access control list.
Answer: A
NEW QUESTION 78
......
Get 100% Passing Success With True 1Z0-116 Exam: https://www.trainingdump.com/Oracle/1Z0-116-practice-exam-dumps.html
Premium Quality Oracle 1Z0-116 Online dumps: https://drive.google.com/open?id=1J4Og2_5cIaQ5htIVaVL8vUbRFsuuFBgG